Microsoft Internet Explorer CVE-2013-3163 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 8, 9, and 10 are...

Microsoft Internet Explorer Memory Corruption (MS13-055: CVE-2013-3147)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Discuz! X3 最新存储xss

简要描述： Discuz! X3 最新存储xss 详细说明： Discuz! X3 个人空间 -- 装扮空间处 开始 自定义 文字颜色处 构造语句exp//ressi//on:alertdocument.cookie IE 下触发 ，目前测试浏览器 IE 6、7 漏洞证明：...

CVE-2013-3124

CVE-2013-3124 describes a memory corruption vulnerability in Microsoft Internet Explorer 9 that can allow remote code execution or a denial of service via a crafted webpage. The affected component is Internet Explorer 9; root cause is memory corruption, with the public description noting it as a ...

CVE-2013-3122

Microsoft Internet Explorer 9 is affected by CVE-2013-3122. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a crafted web site, described as a memory corruption issue (distinct from CVE-2013-3117 and CVE-2013-3124). The initial description ...

CVE-2013-3118

CVE-2013-3120 is a memory corruption vulnerability in Microsoft Internet Explorer 10 (MSHTML) related to the CEditAdorner::Detach use-after-free path. Exploitation is achievable through a crafted web page and can lead to remote code execution or a denial of service. An exploit exists (Exploit-DB ...

CVE-2013-3125

Microsoft Internet Explorer 10 is affected by CVE-2013-3125 (Memory corruption) via a crafted web site, distinct from CVE-2013-3118 and CVE-2013-3120. The vulnerability concerns MSHTML/IE10 memory corruption that could allow remote code execution or DoS. Related exploits/documentation exist for o...

Microsoft Internet Explorer HTML Use After Free Memory Corruption (MS13-047; CVE-2013-3139)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Java Applet Driver Manager Privileged toString() Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...

PayPal Cross Site Scripting

====================================================================== | | | | | | \ \ / / | | | | | |/' | \ V / | | | | ' | /| \ \ /\ / / ' \ / \ | || | | | \ |/ /\ V V /| | | | / /^\ \ /|| ||/ // || || / / || ======================================================================= Hello I...

IBM SPSS SamplePower C1Tab ActiveX Heap Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Microsoft Internet Explorer CVE-2013-1311 Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

USAID a Target of DoL Watering Hole Attackers

One of the nine sites serving malware tied to the recent watering hole attack on the U.S. Department of Labor was located in Cambodia and has ties to the United States Agency for International Development USAID. Speculation has it that the DoL attack was targeting downstream employees at the...

金蝶网站可执行任意命令，root权限

简要描述： 金蝶网站可执行任意命令，root权限。 详细说明： 金蝶网站用户登录的地方http://id.kingdee.com/存在命令执行漏洞，借助struts2的私有变量class.classLoader.jarPath可以执行任意命令（并且是root权限），很可能获得webshell（当然我没有尝试获取），进而可能威胁到用户的数据安全。因为是以root权限执行任意命令，可获得服务器完全控制权，并且可能以这台服务器为跳板威胁周围其它服务器的安全。 漏洞证明： 用IE浏览器访问如下链接：...

Microsoft Patch Zero Day Used to Attack Deptartment of Labor

Microsoft will ship 10 bulletins in the May edition of Patch Tuesday. The company considers just two of the patches critical, one of which supplements the currently available “Fix it” tool that resolved the IE zero-day vulnerability exploited recently in a watering-hole attack targeting the U.S...

Microsoft Fix It a Temporary Patch for IE 8 Zero Day Flaw

Microsoft has released a Fix-It to address an Internet Explorer 8 zero-day that was exploited in a watering hole attack against the U.S. Department of Labor website last week. The Fix It is a temporary mitigation until a patch is released. Microsoft’s next scheduled Patch Tuesday security updates...

Microsoft Internet Explorer Remote Code Execution Vulnerability (2847140)

This host is missing a critical security update according to Microsoft Bulletin MS13-038. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Immunity Canvas: JAVA_DYNAMICBINDING

Name| javaDynamicBinding ---|--- CVE| CVE-2013-2423 Exploit Pack| CANVAS Description| javaDynamicBinding Notes| CVE Name: CVE-2013-2423 VENDOR: Sun Notes: A vulnerability in MethodHandle allows to overwrite public final fields. This can be abused in order to disable Java Sandbox. The current...

Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerability (Windows)

This host is installed with google chrome frame plugin for microsoft ie and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromeframedosvulnwin.nasl 6093 2017-05-10 09:03:18Z teissa $ Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerabilit...

Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerability - Windows

google chrome frame plugin for microsoft ie is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...